IP Reputation Tracker

Real-time IP threat intelligence. Automated detection, aggregation and reporting of malicious IP activity across monitored infrastructure.

23,371Tracked IPs
160,852Threat Reports

Worst Offenders — Last 3 Days

# IP Threat Level Reports Type Country Org Last Seen
3521 198.235.24.11 63 1 🇺🇸 United States Palo Alto Networks, Inc 17 Jun 2026 - 04:08
3522 66.171.107.95 63 2 🇨🇦 Canada Mascon Cable Systems Inc. 17 Jun 2026 - 02:57
3523 172.233.221.115 63 1 🇺🇸 United States Akamai Technologies, Inc. 17 Jun 2026 - 02:54
3524 45.156.128.131 63 1 🇳🇱 The Netherlands Inap AMS 17 Jun 2026 - 01:59
3525 198.235.24.128 63 1 🇺🇸 United States Palo Alto Networks, Inc 16 Jun 2026 - 19:12
3526 20.116.17.49 63 1 🇨🇦 Canada Microsoft Azure Cloud (canadacentral) 16 Jun 2026 - 18:57
3527 20.104.205.212 63 1 🇨🇦 Canada Microsoft Azure Cloud (canadacentral) 16 Jun 2026 - 18:07
3528 198.235.24.203 63 1 🇺🇸 United States Palo Alto Networks, Inc 16 Jun 2026 - 17:43
3529 45.66.35.28 62 5 🇳🇱 The Netherlands Sabotage LLC 19 Jun 2026 - 16:40
3530 45.135.193.105 62 1 🇩🇪 Germany Pfcloud UG 19 Jun 2026 - 16:38
3531 34.101.127.234 62 1 🇮🇩 Indonesia Google Cloud (asia-southeast2) 19 Jun 2026 - 16:38
3532 47.251.111.209 62 1 🇺🇸 United States Alibaba Cloud - US 19 Jun 2026 - 16:31
3533 38.158.83.105 62 1 🇵🇪 Peru Cogent Communications 19 Jun 2026 - 16:29
3534 152.163.119.129 62 1 🇺🇸 United States AS9009 M247 Europe SRL 19 Jun 2026 - 15:59
3535 85.198.19.244 62 2 🇮🇷 Iran AS60077 Asre Dadeha Asiatech 19 Jun 2026 - 15:38
3536 47.250.80.106 62 1 🇲🇾 Malaysia Alibaba Cloud - MY 19 Jun 2026 - 15:27
3537 47.74.54.11 62 1 🇯🇵 Japan Alibaba Cloud - JP 19 Jun 2026 - 15:26
3538 180.210.128.83 62 1 🇧🇩 Bangladesh Bangla Phone Ltd 19 Jun 2026 - 15:22
3539 101.96.210.5 62 1 🇨🇳 China Beijing Volcano Engine Technology Co., Ltd. 19 Jun 2026 - 15:20
3540 152.163.119.204 62 1 🇺🇸 United States AS9009 M247 Europe SRL 19 Jun 2026 - 15:19

About

UnwantedIP aggregates block events from multiple servers running the EagleEye security stack — WordPress firewalls, SSH honeypots, and web application scanners. Each detected attack is enriched with reverse DNS, geolocation, and ASN data and stored as a permanent threat record.

A REST API allows external sources to query IP reputation data and submit new threat reports. Search any IP address using the URL pattern /ip/x.x.x.x.